Description

Multiple cross-site scripting (XSS) vulnerabilities in ATutor LMS version 2.2.

Remediation

References

CVE-2015-6521

Related Vulnerabilities

WordPress Plugin Akeeba Backup CORE for WordPress Arbitrary File Upload (1.1.3)

MODX Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-25911)

WordPress Plugin ActiveCampaign-Forms, Site Tracking, Live Chat Cross-Site Request Forgery (8.0.1)

WordPress Plugin Request a Quote Cross-Site Scripting (2.3.4)

WordPress Plugin Backup and Restore WordPress-WPBackItUp Arbitrary File Deletion (1.15.3)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-6521